Misp-Project: >> Malware Information Sharing Platform >> 2.4.169 Security Vulnerabilities
An issue was discovered in MISP before 2.4.176. app/Controller/Component/IndexFilterComponent.php does not properly filter out query parameters.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-11-17
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-11-17
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-11-17
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php lacks a checkParam function for alphanumerics, underscore, dash, period, and space.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-11-17
An issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles parameter parsing.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-11-17
In MISP before 2.4.172, title_for_layout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts.
CVSS Score
5.4
EPSS Score
0.001
Published
2023-06-30
In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index.
CVSS Score
6.1
EPSS Score
0.002
Published
2023-03-27